$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: Uh6Q1C3+ElKh1hMz928Kk7l4knrWfNNUur/h9RlxYMY= Subject key identifier: D0:D7:3C:D8:77:6B:7B:C0:0E:78:4B:0D:F8:5C:E0:21:35:24:5E:ED Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0D23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0D18 Signing time: Mon 22 Jun 2026 18:10:28 +0000 Manifest this update: Mon 22 Jun 2026 18:10:27 +0000 Manifest next update: Mon 29 Jun 2026 18:10:27 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: b5BD+ibrlJMtj5mPbiMIj4JJ0f6/KC99nZphOU+E5JQ=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: h96ygBqP1HseQXwwUH62n5eNi2bKC3tu8QpUrxfOlvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 18:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3363 (0xd23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: Jun 22 18:10:27 2026 GMT Not After : Jun 29 18:10:27 2026 GMT Subject: CN=6a397a93-a976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ee:2f:39:06:ad:68:6a:61:91:73:31:a4:29: 44:5c:88:32:2f:67:7a:b1:d9:33:2c:23:cd:fd:63: 66:f1:4e:3a:a8:9f:9d:e1:5c:64:37:21:4f:18:63: 66:71:6e:86:46:90:19:cd:d5:e4:66:7e:db:f1:70: 3f:8d:51:7d:42:d1:ee:02:0d:35:5d:12:18:77:24: 58:03:27:35:22:8d:24:e5:89:18:1f:c3:57:39:08: 2d:2f:01:9b:e2:cf:d8:c5:eb:e7:7c:e4:48:c5:d6: 38:8b:95:e6:7c:5d:33:a7:dc:39:fb:b7:dc:3c:2a: a0:70:37:1d:31:9f:e0:0d:6a:dc:98:ac:25:71:5a: a4:a1:3a:88:c5:8f:5f:ac:0b:a0:fe:58:29:01:81: b5:a9:7e:92:83:75:2e:c5:60:61:ce:14:28:99:a2: 79:52:89:42:85:64:e8:3a:1f:60:51:9e:4c:a6:46: 2a:b6:34:84:1c:e3:64:d1:78:8e:fc:43:38:cf:af: 6e:84:e0:7e:08:4b:58:a2:1d:d2:e8:aa:70:0a:8a: be:bb:10:eb:fe:6a:16:04:10:51:e7:5b:48:17:17: 0e:ce:55:a8:df:3e:aa:37:e0:b1:7b:31:26:07:e0: 3c:a1:43:e9:20:99:bb:ed:71:ea:0c:0d:ab:3e:55: e4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D7:3C:D8:77:6B:7B:C0:0E:78:4B:0D:F8:5C:E0:21:35:24:5E:ED X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:30:10:af:6f:6b:bf:42:05:1e:26:f6:b0:c6:80:69:d5:cc: 22:bd:1f:99:35:dc:c5:c2:c1:78:26:1d:e4:da:59:be:7e:ed: 88:17:a3:fd:7c:47:c2:e1:91:ac:cd:0d:cd:26:ab:3e:9b:49: 6d:b0:67:f9:12:22:c6:b8:c3:e2:c6:c6:89:56:3f:db:32:ee: 9d:00:51:c1:23:2f:72:17:0b:c1:8a:19:64:aa:a1:44:4b:9a: f1:26:d7:9a:65:2b:bb:3c:6d:4f:9d:31:2b:71:4f:64:c6:cc: ae:db:22:f3:b9:b2:77:94:b2:13:70:b6:91:17:65:8d:87:e4: 1c:11:e6:1c:37:cd:bd:f5:de:23:28:3f:98:2e:39:9a:05:8e: c1:d6:16:ce:7f:19:76:78:e8:c8:ab:0f:76:58:1d:34:66:6d: 20:f1:26:74:67:53:df:dc:80:73:a2:b7:95:cd:77:0a:3e:fa: 16:31:38:7a:a0:85:2d:f3:3c:2c:0f:b0:d7:0b:bd:89:6d:ae: 50:27:34:2e:2e:83:73:5e:81:82:6f:8d:04:67:c2:01:c8:00: 11:2a:52:14:3a:5d:0e:c2:69:ae:cd:e3:2c:da:88:b0:6c:7b: 2c:ba:34:03:79:8c:ac:91:c4:a7:56:be:d1:25:0a:8a:98:83: aa:33:03:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjYwNjIyMTgxMDI3WhcNMjYwNjI5MTgxMDI3WjAYMRYwFAYD VQQDEw02YTM5N2E5My1hOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+4vOQataGphkXMxpClEXIgyL2d6sdkzLCPN/WNm8U46qJ+d4VxkNyFPGGNm cW6GRpAZzdXkZn7b8XA/jVF9QtHuAg01XRIYdyRYAyc1Io0k5YkYH8NXOQgtLwGb 4s/YxevnfORIxdY4i5XmfF0zp9w5+7fcPCqgcDcdMZ/gDWrcmKwlcVqkoTqIxY9f rAug/lgpAYG1qX6Sg3UuxWBhzhQomaJ5UolChWToOh9gUZ5MpkYqtjSEHONk0XiO /EM4z69uhOB+CEtYoh3S6KpwCoq+uxDr/moWBBBR51tIFxcOzlWo3z6qN+CxezEm B+A8oUPpIJm77XHqDA2rPlXktQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNDXPNh3 a3vADnhLDfhc4CE1JF7tMB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJTAQr29rv0IFHib2sMaAadXMIr0fmTXcxcLBeCYd5NpZvn7tiBej/XxHwuGR rM0NzSarPptJbbBn+RIixrjD4sbGiVY/2zLunQBRwSMvchcLwYoZZKqhREua8SbX mmUruzxtT50xK3FPZMbMrtsi87myd5SyE3C2kRdljYfkHBHmHDfNvfXeIyg/mC45 mgWOwdYWzn8ZdnjoyKsPdlgdNGZtIPEmdGdT39yAc6K3lc13Cj76FjE4eqCFLfM8 LA+w1wu9iW2uUCc0Li6Dc16Bgm+NBGfCAcgAESpSFDpdDsJprs3jLNqIsGx7LLo0 A3mMrJHEp1a+0SUKipiDqjMDIA== -----END CERTIFICATE-----Generated at Wed Jun 24 11:18:48 2026 by rpki-client